Senior DFIR Consultant - Ransomware & Incident Response (Madrid)

FTI Consulting; Madrid; Hybrid; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Competitive benefits

Flexible/hybrid work

Professional development

Wellness program

Job summary

FTI Consulting in Madrid is seeking a Senior Consultant to lead DFIR engagements and deliver complex cybersecurity investigations for global clients. You will acquire evidence across endpoints, servers, networks and mobile devices, producing clear, actionable findings.

You will mentor junior consultants, collaborate with international teams and travel to client sites as required, helping expand our EMEA Cybersecurity practice while upholding the highest standards of confidentiality and client

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science or related field.
• Significant experience in Digital Forensics and Incident Response (DFIR), including leading investigations into ransomware and data breaches.
• Strong hands-on forensics across Windows, Linux, macOS and mobile devices.
• Experience with EDR and SIEM tools such as CrowdStrike, SentinelOne, Splunk or Wireshark.
• Knowledge of evidence preservation, chain of custody and cybersecurity frameworks (NIST, ISO 27001, GDPR).
• Proven ability to manage client engagements, produce technical reports and mentor junior team members.
• Excellent written and verbal communication in English and Spanish.
• Willingness to travel as required.

Responsibilities

• Lead cybersecurity engagements involving DFIR, including ransomware and data breaches.
• Plan and conduct forensic investigations across endpoints, servers and networks.
• Identify indicators of compromise and reconstruct attacker activity.
• Use DFIR tools to investigate threats and support containment.
• Prepare and review technical reports for clients and senior stakeholders.
• Manage client relationships and ensure timely delivery.
• Mentor junior consultants and review their work.
• Support business development and service improvements.
• Stay up to date with emerging cyber threats and best practices.
• Collaborate with international teams and travel when required.

Skills

DFIR expertise

Digital forensics

EDR/SIEM tools

OS platforms

Client engagement

EN/ES bilingual

Education

Bachelor’s degree in Cybersecurity/CS

Tools

FTK Imager

Magnet AXIOM

EnCase

Cellebrite

Volatility

CrowdStrike

SentinelOne

Splunk

Wireshark

Job description

FTI Consulting in Madrid is seeking a Senior Consultant to lead DFIR engagements and deliver complex cybersecurity investigations for global clients. You will acquire evidence across endpoints, servers, networks and mobile devices, producing clear, actionable findings.

You will mentor junior consultants, collaborate with international teams and travel to client sites as required, helping expand our EMEA Cybersecurity practice while upholding the highest standards of confidentiality and client